svc.c 13.9 KB
Newer Older
L
Linus Torvalds 已提交
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24
/*
 * linux/fs/lockd/svc.c
 *
 * This is the central lockd service.
 *
 * FIXME: Separate the lockd NFS server functionality from the lockd NFS
 * 	  client functionality. Oh why didn't Sun create two separate
 *	  services in the first place?
 *
 * Authors:	Olaf Kirch (okir@monad.swb.de)
 *
 * Copyright (C) 1995, 1996 Olaf Kirch <okir@monad.swb.de>
 */

#include <linux/module.h>
#include <linux/init.h>
#include <linux/sysctl.h>
#include <linux/moduleparam.h>

#include <linux/sched.h>
#include <linux/errno.h>
#include <linux/in.h>
#include <linux/uio.h>
#include <linux/smp.h>
I
Ingo Molnar 已提交
25
#include <linux/mutex.h>
J
Jeff Layton 已提交
26
#include <linux/kthread.h>
27
#include <linux/freezer.h>
L
Linus Torvalds 已提交
28 29 30 31 32 33

#include <linux/sunrpc/types.h>
#include <linux/sunrpc/stats.h>
#include <linux/sunrpc/clnt.h>
#include <linux/sunrpc/svc.h>
#include <linux/sunrpc/svcsock.h>
34
#include <net/ip.h>
L
Linus Torvalds 已提交
35 36 37
#include <linux/lockd/lockd.h>
#include <linux/nfs.h>

38 39
#include "netns.h"

L
Linus Torvalds 已提交
40 41 42 43 44 45 46
#define NLMDBG_FACILITY		NLMDBG_SVC
#define LOCKD_BUFSIZE		(1024 + NLMSVC_XDRSIZE)
#define ALLOWED_SIGS		(sigmask(SIGKILL))

static struct svc_program	nlmsvc_program;

struct nlmsvc_binding *		nlmsvc_ops;
47
EXPORT_SYMBOL_GPL(nlmsvc_ops);
L
Linus Torvalds 已提交
48

I
Ingo Molnar 已提交
49
static DEFINE_MUTEX(nlmsvc_mutex);
L
Linus Torvalds 已提交
50
static unsigned int		nlmsvc_users;
J
Jeff Layton 已提交
51
static struct task_struct	*nlmsvc_task;
52
static struct svc_rqst		*nlmsvc_rqst;
L
Linus Torvalds 已提交
53 54
unsigned long			nlmsvc_timeout;

55 56
int lockd_net_id;

L
Linus Torvalds 已提交
57 58 59 60 61 62 63 64
/*
 * These can be set at insmod time (useful for NFS as root filesystem),
 * and also changed through the sysctl interface.  -- Jamie Lokier, Aug 2003
 */
static unsigned long		nlm_grace_period;
static unsigned long		nlm_timeout = LOCKD_DFLT_TIMEO;
static int			nlm_udpport, nlm_tcpport;

65 66 67
/* RLIM_NOFILE defaults to 1024. That seems like a reasonable default here. */
static unsigned int		nlm_max_connections = 1024;

L
Linus Torvalds 已提交
68 69 70 71 72 73 74 75 76
/*
 * Constants needed for the sysctl interface.
 */
static const unsigned long	nlm_grace_period_min = 0;
static const unsigned long	nlm_grace_period_max = 240;
static const unsigned long	nlm_timeout_min = 3;
static const unsigned long	nlm_timeout_max = 20;
static const int		nlm_port_min = 0, nlm_port_max = 65535;

77
#ifdef CONFIG_SYSCTL
L
Linus Torvalds 已提交
78
static struct ctl_table_header * nlm_sysctl_table;
79
#endif
L
Linus Torvalds 已提交
80

81
static unsigned long get_lockd_grace_period(void)
L
Linus Torvalds 已提交
82 83 84
{
	/* Note: nlm_timeout should always be nonzero */
	if (nlm_grace_period)
85
		return roundup(nlm_grace_period, nlm_timeout) * HZ;
L
Linus Torvalds 已提交
86
	else
87 88 89
		return nlm_timeout * 5 * HZ;
}

90 91
static struct lock_manager lockd_manager = {
};
92

93
static void grace_ender(struct work_struct *not_used)
94
{
95
	locks_end_grace(&lockd_manager);
L
Linus Torvalds 已提交
96 97
}

98 99 100
static DECLARE_DELAYED_WORK(grace_period_end, grace_ender);

static void set_grace_period(void)
L
Linus Torvalds 已提交
101
{
102
	unsigned long grace_period = get_lockd_grace_period();
103

104
	locks_start_grace(&lockd_manager);
105 106
	cancel_delayed_work_sync(&grace_period_end);
	schedule_delayed_work(&grace_period_end, grace_period);
L
Linus Torvalds 已提交
107 108
}

109 110 111 112 113 114 115 116 117 118
static void restart_grace(void)
{
	if (nlmsvc_ops) {
		cancel_delayed_work_sync(&grace_period_end);
		locks_end_grace(&lockd_manager);
		nlmsvc_invalidate_all();
		set_grace_period();
	}
}

L
Linus Torvalds 已提交
119 120 121
/*
 * This is the lockd kernel thread
 */
J
Jeff Layton 已提交
122 123
static int
lockd(void *vrqstp)
L
Linus Torvalds 已提交
124
{
125
	int		err = 0, preverr = 0;
J
Jeff Layton 已提交
126
	struct svc_rqst *rqstp = vrqstp;
L
Linus Torvalds 已提交
127

J
Jeff Layton 已提交
128
	/* try_to_freeze() is called from svc_recv() */
129
	set_freezable();
L
Linus Torvalds 已提交
130

J
Jeff Layton 已提交
131
	/* Allow SIGKILL to tell lockd to drop all of its locks */
L
Linus Torvalds 已提交
132 133 134 135 136 137 138 139
	allow_signal(SIGKILL);

	dprintk("NFS locking service started (ver " LOCKD_VERSION ").\n");

	if (!nlm_timeout)
		nlm_timeout = LOCKD_DFLT_TIMEO;
	nlmsvc_timeout = nlm_timeout * HZ;

140
	set_grace_period();
L
Linus Torvalds 已提交
141 142 143

	/*
	 * The main request loop. We don't terminate until the last
J
Jeff Layton 已提交
144
	 * NFS mount or NFS daemon has gone away.
L
Linus Torvalds 已提交
145
	 */
J
Jeff Layton 已提交
146
	while (!kthread_should_stop()) {
L
Linus Torvalds 已提交
147
		long timeout = MAX_SCHEDULE_TIMEOUT;
148
		RPC_IFDEBUG(char buf[RPC_MAX_ADDRBUFLEN]);
L
Linus Torvalds 已提交
149

150 151 152
		/* update sv_maxconn if it has changed */
		rqstp->rq_server->sv_maxconn = nlm_max_connections;

L
Linus Torvalds 已提交
153 154
		if (signalled()) {
			flush_signals(current);
155
			restart_grace();
J
Jeff Layton 已提交
156
			continue;
L
Linus Torvalds 已提交
157 158
		}

159 160
		timeout = nlmsvc_retry_blocked();

L
Linus Torvalds 已提交
161 162 163 164
		/*
		 * Find a socket with data available and call its
		 * recvfrom routine.
		 */
165
		err = svc_recv(rqstp, timeout);
166 167
		if (err == -EAGAIN || err == -EINTR) {
			preverr = err;
L
Linus Torvalds 已提交
168
			continue;
169
		}
L
Linus Torvalds 已提交
170
		if (err < 0) {
171 172 173 174 175 176 177
			if (err != preverr) {
				printk(KERN_WARNING "%s: unexpected error "
					"from svc_recv (%d)\n", __func__, err);
				preverr = err;
			}
			schedule_timeout_interruptible(HZ);
			continue;
L
Linus Torvalds 已提交
178
		}
179
		preverr = err;
L
Linus Torvalds 已提交
180

181 182
		dprintk("lockd: request from %s\n",
				svc_print_addr(rqstp, buf, sizeof(buf)));
L
Linus Torvalds 已提交
183

184
		svc_process(rqstp);
L
Linus Torvalds 已提交
185
	}
186
	flush_signals(current);
187
	cancel_delayed_work_sync(&grace_period_end);
188
	locks_end_grace(&lockd_manager);
J
Jeff Layton 已提交
189 190 191 192
	if (nlmsvc_ops)
		nlmsvc_invalidate_all();
	nlm_shutdown_hosts();
	return 0;
L
Linus Torvalds 已提交
193 194
}

195
static int create_lockd_listener(struct svc_serv *serv, const char *name,
196 197
				 struct net *net, const int family,
				 const unsigned short port)
198 199 200
{
	struct svc_xprt *xprt;

201
	xprt = svc_find_xprt(serv, name, net, family, 0);
202
	if (xprt == NULL)
203
		return svc_create_xprt(serv, name, net, family, port,
204
						SVC_SOCK_DEFAULTS);
205 206 207 208
	svc_xprt_put(xprt);
	return 0;
}

209 210
static int create_lockd_family(struct svc_serv *serv, struct net *net,
			       const int family)
211 212 213
{
	int err;

214
	err = create_lockd_listener(serv, "udp", net, family, nlm_udpport);
215 216 217
	if (err < 0)
		return err;

218
	return create_lockd_listener(serv, "tcp", net, family, nlm_tcpport);
219 220
}

221
/*
222 223 224 225 226 227 228 229
 * Ensure there are active UDP and TCP listeners for lockd.
 *
 * Even if we have only TCP NFS mounts and/or TCP NFSDs, some
 * local services (such as rpc.statd) still require UDP, and
 * some NFS servers do not yet support NLM over TCP.
 *
 * Returns zero if all listeners are available; otherwise a
 * negative errno value is returned.
230
 */
231
static int make_socks(struct svc_serv *serv, struct net *net)
232
{
233
	static int warned;
234
	int err;
235

236
	err = create_lockd_family(serv, net, PF_INET);
237 238 239
	if (err < 0)
		goto out_err;

240
	err = create_lockd_family(serv, net, PF_INET6);
241
	if (err < 0 && err != -EAFNOSUPPORT)
242 243 244 245 246 247 248
		goto out_err;

	warned = 0;
	return 0;

out_err:
	if (warned++ == 0)
249
		printk(KERN_WARNING
250
			"lockd_up: makesock failed, error=%d\n", err);
251 252 253
	return err;
}

L
Linus Torvalds 已提交
254 255 256
/*
 * Bring up the lockd process if it's not already up.
 */
257
int lockd_up(void)
L
Linus Torvalds 已提交
258
{
J
Jeff Layton 已提交
259 260
	struct svc_serv *serv;
	int		error = 0;
261
	struct net *net = current->nsproxy->net_ns;
L
Linus Torvalds 已提交
262

I
Ingo Molnar 已提交
263
	mutex_lock(&nlmsvc_mutex);
L
Linus Torvalds 已提交
264 265 266
	/*
	 * Check whether we're already up and running.
	 */
267
	if (nlmsvc_rqst)
L
Linus Torvalds 已提交
268 269 270 271 272 273
		goto out;

	/*
	 * Sanity check: if there's no pid,
	 * we should be the first user ...
	 */
274
	if (nlmsvc_users)
L
Linus Torvalds 已提交
275 276 277 278
		printk(KERN_WARNING
			"lockd_up: no pid, %d users??\n", nlmsvc_users);

	error = -ENOMEM;
279
	serv = svc_create(&nlmsvc_program, LOCKD_BUFSIZE, NULL);
L
Linus Torvalds 已提交
280 281 282 283 284
	if (!serv) {
		printk(KERN_WARNING "lockd_up: create service failed\n");
		goto out;
	}

285
	error = make_socks(serv, net);
286
	if (error < 0)
L
Linus Torvalds 已提交
287 288 289 290 291
		goto destroy_and_out;

	/*
	 * Create the kernel thread and wait for it to start.
	 */
292
	nlmsvc_rqst = svc_prepare_thread(serv, &serv->sv_pools[0], NUMA_NO_NODE);
293 294 295
	if (IS_ERR(nlmsvc_rqst)) {
		error = PTR_ERR(nlmsvc_rqst);
		nlmsvc_rqst = NULL;
J
Jeff Layton 已提交
296 297 298 299 300 301 302
		printk(KERN_WARNING
			"lockd_up: svc_rqst allocation failed, error=%d\n",
			error);
		goto destroy_and_out;
	}

	svc_sock_update_bufs(serv);
303
	serv->sv_maxconn = nlm_max_connections;
J
Jeff Layton 已提交
304

305
	nlmsvc_task = kthread_run(lockd, nlmsvc_rqst, serv->sv_name);
J
Jeff Layton 已提交
306 307
	if (IS_ERR(nlmsvc_task)) {
		error = PTR_ERR(nlmsvc_task);
308
		svc_exit_thread(nlmsvc_rqst);
J
Jeff Layton 已提交
309
		nlmsvc_task = NULL;
310
		nlmsvc_rqst = NULL;
L
Linus Torvalds 已提交
311
		printk(KERN_WARNING
J
Jeff Layton 已提交
312
			"lockd_up: kthread_run failed, error=%d\n", error);
L
Linus Torvalds 已提交
313 314 315 316 317 318 319 320 321 322
		goto destroy_and_out;
	}

	/*
	 * Note: svc_serv structures have an initial use count of 1,
	 * so we exit through here on both success and failure.
	 */
destroy_and_out:
	svc_destroy(serv);
out:
323 324 325 326
	if (!error) {
		struct lockd_net *ln = net_generic(net, lockd_net_id);

		ln->nlmsvc_users++;
327
		nlmsvc_users++;
328
	}
I
Ingo Molnar 已提交
329
	mutex_unlock(&nlmsvc_mutex);
L
Linus Torvalds 已提交
330 331
	return error;
}
332
EXPORT_SYMBOL_GPL(lockd_up);
L
Linus Torvalds 已提交
333 334 335 336 337 338 339

/*
 * Decrement the user count and bring down lockd if we're the last.
 */
void
lockd_down(void)
{
I
Ingo Molnar 已提交
340
	mutex_lock(&nlmsvc_mutex);
L
Linus Torvalds 已提交
341 342 343
	if (nlmsvc_users) {
		if (--nlmsvc_users)
			goto out;
J
Jeff Layton 已提交
344 345 346 347
	} else {
		printk(KERN_ERR "lockd_down: no users! task=%p\n",
			nlmsvc_task);
		BUG();
L
Linus Torvalds 已提交
348 349
	}

J
Jeff Layton 已提交
350 351 352
	if (!nlmsvc_task) {
		printk(KERN_ERR "lockd_down: no lockd running.\n");
		BUG();
L
Linus Torvalds 已提交
353
	}
J
Jeff Layton 已提交
354
	kthread_stop(nlmsvc_task);
355 356 357
	svc_exit_thread(nlmsvc_rqst);
	nlmsvc_task = NULL;
	nlmsvc_rqst = NULL;
L
Linus Torvalds 已提交
358
out:
I
Ingo Molnar 已提交
359
	mutex_unlock(&nlmsvc_mutex);
L
Linus Torvalds 已提交
360
}
361
EXPORT_SYMBOL_GPL(lockd_down);
L
Linus Torvalds 已提交
362

363 364
#ifdef CONFIG_SYSCTL

L
Linus Torvalds 已提交
365 366 367 368 369 370 371 372
/*
 * Sysctl parameters (same as module parameters, different interface).
 */

static ctl_table nlm_sysctls[] = {
	{
		.procname	= "nlm_grace_period",
		.data		= &nlm_grace_period,
373
		.maxlen		= sizeof(unsigned long),
L
Linus Torvalds 已提交
374
		.mode		= 0644,
375
		.proc_handler	= proc_doulongvec_minmax,
L
Linus Torvalds 已提交
376 377 378 379 380 381
		.extra1		= (unsigned long *) &nlm_grace_period_min,
		.extra2		= (unsigned long *) &nlm_grace_period_max,
	},
	{
		.procname	= "nlm_timeout",
		.data		= &nlm_timeout,
382
		.maxlen		= sizeof(unsigned long),
L
Linus Torvalds 已提交
383
		.mode		= 0644,
384
		.proc_handler	= proc_doulongvec_minmax,
L
Linus Torvalds 已提交
385 386 387 388 389 390 391 392
		.extra1		= (unsigned long *) &nlm_timeout_min,
		.extra2		= (unsigned long *) &nlm_timeout_max,
	},
	{
		.procname	= "nlm_udpport",
		.data		= &nlm_udpport,
		.maxlen		= sizeof(int),
		.mode		= 0644,
393
		.proc_handler	= proc_dointvec_minmax,
L
Linus Torvalds 已提交
394 395 396 397 398 399 400 401
		.extra1		= (int *) &nlm_port_min,
		.extra2		= (int *) &nlm_port_max,
	},
	{
		.procname	= "nlm_tcpport",
		.data		= &nlm_tcpport,
		.maxlen		= sizeof(int),
		.mode		= 0644,
402
		.proc_handler	= proc_dointvec_minmax,
L
Linus Torvalds 已提交
403 404 405
		.extra1		= (int *) &nlm_port_min,
		.extra2		= (int *) &nlm_port_max,
	},
406 407 408 409 410
	{
		.procname	= "nsm_use_hostnames",
		.data		= &nsm_use_hostnames,
		.maxlen		= sizeof(int),
		.mode		= 0644,
411
		.proc_handler	= proc_dointvec,
412
	},
413 414 415 416 417
	{
		.procname	= "nsm_local_state",
		.data		= &nsm_local_state,
		.maxlen		= sizeof(int),
		.mode		= 0644,
418
		.proc_handler	= proc_dointvec,
419
	},
420
	{ }
L
Linus Torvalds 已提交
421 422 423 424 425 426 427 428
};

static ctl_table nlm_sysctl_dir[] = {
	{
		.procname	= "nfs",
		.mode		= 0555,
		.child		= nlm_sysctls,
	},
429
	{ }
L
Linus Torvalds 已提交
430 431 432 433 434 435 436 437
};

static ctl_table nlm_sysctl_root[] = {
	{
		.procname	= "fs",
		.mode		= 0555,
		.child		= nlm_sysctl_dir,
	},
438
	{ }
L
Linus Torvalds 已提交
439 440
};

441 442
#endif	/* CONFIG_SYSCTL */

L
Linus Torvalds 已提交
443
/*
444
 * Module (and sysfs) parameters.
L
Linus Torvalds 已提交
445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 500 501 502 503 504 505 506 507
 */

#define param_set_min_max(name, type, which_strtol, min, max)		\
static int param_set_##name(const char *val, struct kernel_param *kp)	\
{									\
	char *endp;							\
	__typeof__(type) num = which_strtol(val, &endp, 0);		\
	if (endp == val || *endp || num < (min) || num > (max))		\
		return -EINVAL;						\
	*((int *) kp->arg) = num;					\
	return 0;							\
}

static inline int is_callback(u32 proc)
{
	return proc == NLMPROC_GRANTED
		|| proc == NLMPROC_GRANTED_MSG
		|| proc == NLMPROC_TEST_RES
		|| proc == NLMPROC_LOCK_RES
		|| proc == NLMPROC_CANCEL_RES
		|| proc == NLMPROC_UNLOCK_RES
		|| proc == NLMPROC_NSM_NOTIFY;
}


static int lockd_authenticate(struct svc_rqst *rqstp)
{
	rqstp->rq_client = NULL;
	switch (rqstp->rq_authop->flavour) {
		case RPC_AUTH_NULL:
		case RPC_AUTH_UNIX:
			if (rqstp->rq_proc == 0)
				return SVC_OK;
			if (is_callback(rqstp->rq_proc)) {
				/* Leave it to individual procedures to
				 * call nlmsvc_lookup_host(rqstp)
				 */
				return SVC_OK;
			}
			return svc_set_client(rqstp);
	}
	return SVC_DENIED;
}


param_set_min_max(port, int, simple_strtol, 0, 65535)
param_set_min_max(grace_period, unsigned long, simple_strtoul,
		  nlm_grace_period_min, nlm_grace_period_max)
param_set_min_max(timeout, unsigned long, simple_strtoul,
		  nlm_timeout_min, nlm_timeout_max)

MODULE_AUTHOR("Olaf Kirch <okir@monad.swb.de>");
MODULE_DESCRIPTION("NFS file locking service version " LOCKD_VERSION ".");
MODULE_LICENSE("GPL");

module_param_call(nlm_grace_period, param_set_grace_period, param_get_ulong,
		  &nlm_grace_period, 0644);
module_param_call(nlm_timeout, param_set_timeout, param_get_ulong,
		  &nlm_timeout, 0644);
module_param_call(nlm_udpport, param_set_port, param_get_int,
		  &nlm_udpport, 0644);
module_param_call(nlm_tcpport, param_set_port, param_get_int,
		  &nlm_tcpport, 0644);
508
module_param(nsm_use_hostnames, bool, 0644);
509
module_param(nlm_max_connections, uint, 0644);
L
Linus Torvalds 已提交
510

511 512 513 514 515 516 517 518 519 520 521 522 523 524 525 526 527
static int lockd_init_net(struct net *net)
{
	return 0;
}

static void lockd_exit_net(struct net *net)
{
}

static struct pernet_operations lockd_net_ops = {
	.init = lockd_init_net,
	.exit = lockd_exit_net,
	.id = &lockd_net_id,
	.size = sizeof(struct lockd_net),
};


L
Linus Torvalds 已提交
528 529 530 531 532 533
/*
 * Initialising and terminating the module.
 */

static int __init init_nlm(void)
{
534 535
	int err;

536
#ifdef CONFIG_SYSCTL
537
	err = -ENOMEM;
538
	nlm_sysctl_table = register_sysctl_table(nlm_sysctl_root);
539 540 541 542 543 544
	if (nlm_sysctl_table == NULL)
		goto err_sysctl;
#endif
	err = register_pernet_subsys(&lockd_net_ops);
	if (err)
		goto err_pernet;
545
	return 0;
546 547 548 549

err_pernet:
#ifdef CONFIG_SYSCTL
	unregister_sysctl_table(nlm_sysctl_table);
550
#endif
551 552
err_sysctl:
	return err;
L
Linus Torvalds 已提交
553 554 555 556 557 558
}

static void __exit exit_nlm(void)
{
	/* FIXME: delete all NLM clients */
	nlm_shutdown_hosts();
559
	unregister_pernet_subsys(&lockd_net_ops);
560
#ifdef CONFIG_SYSCTL
L
Linus Torvalds 已提交
561
	unregister_sysctl_table(nlm_sysctl_table);
562
#endif
L
Linus Torvalds 已提交
563 564 565 566 567 568 569 570 571 572 573 574 575 576 577 578 579 580 581 582 583 584 585 586 587 588 589 590 591 592 593 594 595 596 597 598 599 600
}

module_init(init_nlm);
module_exit(exit_nlm);

/*
 * Define NLM program and procedures
 */
static struct svc_version	nlmsvc_version1 = {
		.vs_vers	= 1,
		.vs_nproc	= 17,
		.vs_proc	= nlmsvc_procedures,
		.vs_xdrsize	= NLMSVC_XDRSIZE,
};
static struct svc_version	nlmsvc_version3 = {
		.vs_vers	= 3,
		.vs_nproc	= 24,
		.vs_proc	= nlmsvc_procedures,
		.vs_xdrsize	= NLMSVC_XDRSIZE,
};
#ifdef CONFIG_LOCKD_V4
static struct svc_version	nlmsvc_version4 = {
		.vs_vers	= 4,
		.vs_nproc	= 24,
		.vs_proc	= nlmsvc_procedures4,
		.vs_xdrsize	= NLMSVC_XDRSIZE,
};
#endif
static struct svc_version *	nlmsvc_version[] = {
	[1] = &nlmsvc_version1,
	[3] = &nlmsvc_version3,
#ifdef CONFIG_LOCKD_V4
	[4] = &nlmsvc_version4,
#endif
};

static struct svc_stat		nlmsvc_stats;

601
#define NLM_NRVERS	ARRAY_SIZE(nlmsvc_version)
L
Linus Torvalds 已提交
602 603 604 605 606 607 608 609 610
static struct svc_program	nlmsvc_program = {
	.pg_prog		= NLM_PROGRAM,		/* program number */
	.pg_nvers		= NLM_NRVERS,		/* number of entries in nlmsvc_version */
	.pg_vers		= nlmsvc_version,	/* version table */
	.pg_name		= "lockd",		/* service name */
	.pg_class		= "nfsd",		/* share authentication with nfsd */
	.pg_stats		= &nlmsvc_stats,	/* stats table */
	.pg_authenticate = &lockd_authenticate	/* export authentication */
};